CVE-2026-48916

The Jenkins LDAP Plugin (version 807.v7d7de30930cf and earlier) is vulnerable because it follows LDAP referrals from the configured LDAP server. An attacker who can control the LDAP server or perform a machine-in-the-middle attack can forward these referrals to an RMI URL . This setup causes Jenk...